Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de595f87-5633-35bc-92b1-c8e5373a6330.roa
File:                     de595f87-5633-35bc-92b1-c8e5373a6330.roa (raw, json)
Hash identifier:          I0UeLwO1L4k0C2PwD2F2KKN2+zjWfq0tGGvnlt8LzSk=
Subject key identifier:   D3:B3:A3:13:70:09:DB:1E:1B:E4:79:DD:65:BB:18:96:B9:0C:53:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848854B6355B32B68F101CA5B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de595f87-5633-35bc-92b1-c8e5373a6330.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     6167
IP address blocks:        75.213.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:63:55:b3:2b:68:f1:01:ca:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=184e4e94-a9e8-4efe-9e24-09dd973ad312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:78:ef:c7:c1:dd:fa:45:7c:e7:70:79:73:
                    1b:0d:84:75:4f:fc:27:19:ce:37:19:72:79:ee:d7:
                    cb:ce:93:86:fa:6a:c0:c6:c4:7f:66:54:4b:90:1b:
                    84:59:82:d0:94:60:a8:4c:51:d3:81:7c:d4:b3:17:
                    e9:1b:f9:d7:a0:96:a0:4c:a6:7d:d5:11:94:b1:64:
                    28:04:03:d0:ab:e9:47:8d:28:15:04:d6:4b:8b:d9:
                    9d:71:ce:f0:45:57:f1:e0:50:2e:9f:d8:2e:99:3d:
                    56:30:5f:f4:d9:84:85:4c:25:66:6f:10:1f:87:33:
                    8a:a0:22:64:9e:38:dc:29:dd:0f:29:9e:6b:7b:a3:
                    9a:9f:9e:5f:08:f0:8d:01:c6:71:83:21:01:16:e8:
                    ec:40:90:e0:c0:c4:db:6f:08:b0:83:d1:35:92:05:
                    ef:7f:a0:9f:42:04:57:e5:48:7f:a6:cc:70:5b:9b:
                    72:52:b6:b7:91:7b:29:70:5a:6e:47:b5:cd:66:d7:
                    05:63:4c:3d:78:7e:ab:a3:e6:b4:4b:7e:7f:f5:19:
                    40:a6:ad:43:1c:f2:71:92:cb:de:7f:a7:67:e4:9e:
                    e6:f0:5f:76:ea:b1:88:f3:8c:55:38:a4:b8:2f:cb:
                    3d:c8:2b:94:6e:65:6f:82:16:43:2d:cf:ad:e9:d2:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:A3:13:70:09:DB:1E:1B:E4:79:DD:65:BB:18:96:B9:0C:53:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de595f87-5633-35bc-92b1-c8e5373a6330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.213.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:36:67:12:50:ee:ca:14:14:19:13:c9:20:6b:f8:9d:b5:6a:
         89:00:e2:e3:b9:bf:d9:6e:fa:da:93:d9:4c:8d:de:7c:b0:f3:
         04:a7:64:43:f3:75:a7:e7:87:2b:4d:c2:43:67:d8:b0:2b:1e:
         9e:d5:87:20:0a:b5:7f:5e:36:ed:bf:30:ca:4f:63:84:8a:a7:
         4c:ee:df:9d:2a:81:c5:75:cf:e9:a0:f8:5f:a3:b3:bb:78:72:
         67:e9:45:29:92:67:09:a2:6e:7c:ab:3b:d9:b5:b4:c6:09:82:
         31:21:9d:dc:bf:cb:63:49:d1:80:81:b5:91:33:30:a7:4f:8f:
         23:33:89:a4:b3:fd:19:1a:bc:41:66:de:b9:22:5a:d3:7a:33:
         5d:7b:6c:7f:0e:dc:15:a0:c4:89:69:aa:7f:0e:f8:84:17:20:
         c6:fa:73:48:7d:39:28:9a:95:f0:97:3f:dd:8d:ff:90:24:69:
         f1:9d:5c:bb:6e:1a:c2:e2:c5:5b:14:36:ba:0d:d3:d5:cb:cf:
         7e:6a:35:2a:80:bf:1f:3d:8b:7f:6c:da:4b:df:5a:a0:62:b1:
         b6:ab:bb:70:ed:46:84:7d:88:a0:21:50:54:d1:82:1d:e2:d4:
         ee:c5:69:86:e9:91:36:73:3c:cd:f5:06:ca:af:12:23:76:62:
         ee:ef:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----